IAS Vault

Passwords and documents encrypted on your own device with your fingerprint. No server, no subscription, works fully offline — with an Elder Mode in Tamil and English for one-touch, low-friction use.

▶ Open the vault — live, no installation Book a strategy session

// How it works

Biometric unlock. WebAuthn (platform biometric or passkey) derives your encryption key on device — the key itself is never transmitted anywhere.

On-device encryption. Everything you store is encrypted with AES-256-GCM via the Web Crypto API before it ever touches disk.

Local, offline storage. Encrypted data lives in IndexedDB / localStorage on your device, service-worker cached — the vault works with no network at all.

Your export, your control. There's no vendor copy for us to hold or lose — export and import happen entirely on your terms.

// Why it's different

Zero server, by design

There is no GVS server or database in the data path. Your vault lives on your device — export and import are entirely under your control.

Biometric unlock

WebAuthn (platform biometric / passkey) derives your encryption key on device. The key is never transmitted or escrowed.

Works with no network

Service-worker caching means the vault functions completely offline — useful in restricted or intermittent-connectivity environments.

// Architecture

IAS Vault system architecture diagram: runs in your browser with no external network call, using WebAuthn for biometric unlock and the Web Crypto API for AES-256-GCM encryption.

// Elder Mode — accessibility as a first-class feature

A dedicated low-friction mode in தமிழ் (Tamil) and English, built for users who need larger touch targets, simpler flows, and language they're comfortable in — not an accessibility afterthought bolted on later.

// Build lineage

Current build 2026-07-03.Z35 — part of the IAS Vault lineage z33 → z39, each version born under a full test regime, battling in production, succeeded by the next. Read the lifecycle doctrine →

// Under the hood

Runtime · HTML5 · vanilla JS · zero framework, zero build Crypto · Web Crypto API · AES-256-GCM · PBKDF2 · WebAuthn Storage · IndexedDB · localStorage · service worker Offline · installable, no network required

Full security & data-handling posture →